Odaily News Yu Xian, the founder of SlowMist, posted on the X platform that the 12,000 ETH stolen from Shenyu last year due to a phishing attack was done by the Eastern European hacker group Inferno Drainer, not North Korean hackers. The money laundering model is somewhat similar to that of North Korean hackers, and the funds are difficult to recover.